Skip to Content
Former Member
Jul 01, 2015 at 01:49 PM

ABAP user group provisioning via IDM


Dear Gurus.

I have a need to be able to add and/or remove user groups to/from users in ABAP via IDM.

UpdateABAPUser task seems to be supporting that via "usergroups" attribute.

I was already able to add user groups to user overwritting this, whevever there already was assigned to user in ABAP Backend and that is as far as I managed to get.

I have following questions:

1) is there any option to perform "delta" assignment/deassignment which would add a specific user group the the ones that user already might have assigned in ABAP backend or is IDM only capable of overwritting all that there already is in ABAP?

2) how do I remove all assigned user groups? When I execute the connector with empty value in "usergroups" attribute nothing happens. I tried {E}, {D}, {R} operators, but it always ends up in an error that "{E} user group does not exist" etc.

Thank You in advance for any support in that area.